CVE-2016-6787

High

Published: 28/12/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The Linux kernel before version 4.0 has a lock mismanagement issue in the performance subsystem during certain migrations, allowing local users to gain privileges via a crafted application.

Risk Assessment

This vulnerability may lead to privilege escalation by local users, posing a significant security risk to the system.

Recommendation

It is recommended to update the Linux kernel to version 4.0 or later to mitigate this vulnerability.

Other vulnerabilities in Linux kernel (przed wersją 4.0)

CVE-2015-4036High
Array index error in the tcm_vhost_make_tpg function in the Linux kernel before version 4.0 may allow guest OS users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted VHOST_SCSI_SET_ENDPOINT ioctl call.

Original NVD description (English source)

kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks during certain migrations, which allows local users to gain privileges via a crafted application, aka Android internal bug 31095224.